Page 1 of 1

Finding IAT

Posted: Sat Nov 08, 2008 2:37 pm
by Armagedon
hi
I want to find iat of another process.
i need source code(without madcollection).
can you help me?
thanks.

Posted: Sat Nov 08, 2008 5:30 pm
by iconic
Finding IAT of a module in another process is easy. You should study the PE format and then look into ReadProcessMemory. All you need is the module's size and the HMODULE (image base).

--Iconic

Posted: Sun Nov 09, 2008 1:06 pm
by Armagedon
can you give me a source code?
i want get all iat's(hooked & unhooked)
thanks

Posted: Wed Nov 12, 2008 3:30 am
by iconic
You might look at this example located here. I'm sure you can modify it to scan all processes to fit your needs.

--Iconic

Posted: Wed Nov 12, 2008 7:11 am
by Armagedon
thanks.
but i want delphi code :oops: :sorry: